Note the above example uses servers on distinct ports - this is an important point. The ssl_protocols doesn't allow to change available protocols in virtual servers listening on the same address:port, as protocol have to be selected before nginx will be able to choose a virtual server to use.